Lucene search
PRIOn knowledge basePRION:CVE-2024-2048HistoryMar 04, 2024 - 8:15 p.m.
Authentication flaw
2024-03-0420:15:00
PRIOn knowledge base
www.prio-n.com
23
vault
enterprise
tls
certificate
authentication
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.
Related
osv
osv
Authentication bypass in github.com/hashicorp/vault
2024-03-14 17:13:04
Incorrect TLS certificate auth method in Vault
2024-03-04 21:31:11
BIT-vault-2024-2048
2024-05-01 07:38:21
veracode
veracode
Improper Certificate Validation
2024-03-07 05:26:15
cgr
cgr
CVE-2024-2048 vulnerabilities
2024-05-19 03:07:16
nvd
nvd
CVE-2024-2048
2024-03-04 20:15:50
github
github
Incorrect TLS certificate auth method in Vault
2024-03-04 21:31:11
cvelist
cvelist
cve
cve
CVE-2024-2048
2024-03-04 20:15:50
wolfi
wolfi
CVE-2024-2048 vulnerabilities
2024-07-03 09:08:38
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-03-27 20:12:33
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-06-26 16:06:34